Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/323830343a346433633a316530303a3a2f34332d3433203d3e20323637343230.roa
File:                     323830343a346433633a316530303a3a2f34332d3433203d3e20323637343230.roa (raw, json)
Hash identifier:          LGo2Ly2Us/Dc9Z98iMmFDlyObUnlqljfuBpcdJlqBOY=
Subject key identifier:   7A:36:45:7F:A1:EB:3F:38:F5:61:95:DE:84:70:56:8B:F6:29:49:B4
Certificate issuer:       /CN=C9993E4E7A469482F48DE6C557C1BE415E192A34
Certificate serial:       3F7C97337453331238080016F8C4313F63EF63AE
Authority key identifier: C9:99:3E:4E:7A:46:94:82:F4:8D:E6:C5:57:C1:BE:41:5E:19:2A:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C9993E4E7A469482F48DE6C557C1BE415E192A34.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/323830343a346433633a316530303a3a2f34332d3433203d3e20323637343230.roa
Signing time:             Wed 28 Feb 2024 13:53:44 +0000
ROA not before:           Wed 28 Feb 2024 13:48:44 +0000
ROA not after:            Wed 26 Feb 2025 13:53:44 +0000
asID:                     267420
IP address blocks:        2804:4d3c:1e00::/43 maxlen: 43

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:7c:97:33:74:53:33:12:38:08:00:16:f8:c4:31:3f:63:ef:63:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9993E4E7A469482F48DE6C557C1BE415E192A34
        Validity
            Not Before: Feb 28 13:48:44 2024 GMT
            Not After : Feb 26 13:53:44 2025 GMT
        Subject: CN=7A36457FA1EB3F38F56195DE8470568BF62949B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:1b:00:98:b3:03:f0:53:30:30:3a:79:98:f8:
                    82:c5:48:ad:8d:5b:a1:50:fe:ba:5c:76:bb:88:00:
                    10:ee:a3:0b:30:c2:ab:c2:08:5b:2d:fb:c4:13:40:
                    62:db:5f:2b:a6:50:d8:30:2a:42:9f:87:cc:38:41:
                    a9:ca:17:b4:f9:3c:96:ff:ed:ca:26:ad:dc:bf:7f:
                    65:c7:2b:10:87:cf:9b:c1:50:51:29:95:ae:dc:cf:
                    d2:87:76:da:2f:47:3e:15:b8:e4:b1:5d:4d:2a:83:
                    b8:11:e5:67:0b:e3:c9:89:13:61:1e:c6:23:e9:d6:
                    23:6e:79:71:a0:ed:3b:bc:3e:65:30:14:e7:7f:cf:
                    85:1a:1d:09:67:65:c1:53:3f:4e:9f:01:19:6a:58:
                    c2:dc:a7:3a:7d:d6:97:26:b3:3d:32:44:9f:30:13:
                    c6:16:79:d4:52:ed:59:2a:27:13:d3:a8:bc:96:67:
                    76:0a:3b:c5:67:c4:0a:93:2f:a4:29:fe:78:81:c4:
                    b0:3d:59:da:e4:24:40:a0:a8:b0:9d:bb:4e:cb:fd:
                    fd:f5:d2:67:81:2b:81:24:82:51:10:ee:6f:48:13:
                    19:a0:a4:32:81:2a:f0:9d:e5:47:d2:71:ac:c3:f9:
                    52:93:15:9d:2a:f7:d1:a9:a1:03:55:42:43:c2:dd:
                    ea:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:36:45:7F:A1:EB:3F:38:F5:61:95:DE:84:70:56:8B:F6:29:49:B4
            X509v3 Authority Key Identifier:
                keyid:C9:99:3E:4E:7A:46:94:82:F4:8D:E6:C5:57:C1:BE:41:5E:19:2A:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/C9993E4E7A469482F48DE6C557C1BE415E192A34.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C9993E4E7A469482F48DE6C557C1BE415E192A34.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/323830343a346433633a316530303a3a2f34332d3433203d3e20323637343230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4d3c:1e00::/43

    Signature Algorithm: sha256WithRSAEncryption
         22:aa:ea:20:10:40:53:be:55:c5:2a:02:ee:b2:8a:3a:f4:4f:
         00:82:39:58:34:be:58:ea:16:7b:73:f4:ed:2d:4b:24:16:e5:
         bc:23:3c:c4:f5:1c:34:d5:40:33:83:37:39:27:e0:51:b5:d3:
         ce:00:a4:76:25:a4:b0:fa:4b:47:18:1b:03:b2:e9:39:c7:c3:
         ef:bd:01:b4:1a:cf:29:80:f2:ce:e6:ec:15:28:e9:e3:a9:9c:
         9e:66:c8:cb:c1:07:17:a4:a2:98:b9:52:96:75:12:0a:c3:98:
         ad:76:b7:89:21:d0:b4:af:1e:bb:07:81:40:a0:9b:f9:32:0c:
         a2:ff:e3:df:86:00:06:ca:a7:92:0b:86:3c:49:22:4d:cc:ff:
         14:e7:5c:c0:7b:07:21:fc:8d:76:a4:b8:04:0e:77:c4:92:42:
         44:a6:8e:d2:5b:d4:2d:28:a8:64:71:a2:64:b9:b5:af:f2:43:
         b7:1f:0e:67:95:0c:bb:c9:8a:0e:bc:5f:79:c7:86:66:83:50:
         d9:53:f4:4c:eb:3f:d3:bd:bb:f9:55:93:29:47:95:89:be:eb:
         ce:53:ca:66:da:a3:21:b0:ee:ca:72:41:0a:d1:08:fc:ff:90:
         8e:b4:7c:18:63:a3:f3:11:89:b2:6a:7b:de:64:9c:6f:3b:c7:
         2b:e5:64:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:04 2024 by rpki-client on console-fra.rpki-client.org